Talent.com
Fortinet
Senior Application Security EngineerFortinet • Frankfurt, Hessen, Germany
Senior Application Security Engineer

Senior Application Security Engineer

Fortinet • Frankfurt, Hessen, Germany
Vor 30+ Tagen
Stellenbeschreibung

Senior Application Security Engineer

Fortinet is looking for a Sr. Application Security Engineer to join the Corporate Information Security team. This is a highly technical role, with responsibilities conducting security reviews on various Fortinet applications, providing security education to our engineers and handling externally reported vulnerabilities.

Key Responsibilities:

  • Serve as an application security subject matter expert who provides guidance to internal teams
  • Work closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features.
  • Develop, implement, and communicate vulnerability mitigation strategies to development teams
  • Handle externally reported vulnerabilities as a member of Corporate Information Security Responsible Disclosure Program committee.
  • Drive Fortinet static and dynamic application security testing program.
  • Develop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security and privacy are designed in Fortinet applications
  • Advise development teams on SDLC best practices.
  • Proactively research new attack vectors on applications that may affect Fortinet applications and infrastructure.
  • Be part of a global distributed team to share knowledge, workload and assignments. Strong sense of teamwork is required. Coach peers in application security concepts and best practices.

Required Skills/Experience:

  • 5+ years of work experience as an Information Security Researcher or Engineer
  • 3+ years of experience with manually auditing source code to find security issues or programming skills in one or more of: Java, .NET, Python or JavaScript frameworks.
  • Strong understanding on OWASP TOP 10 vulnerabilities.
  • Strong understanding of common API security risks
  • Strong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.
  • Proven experience in application penetration testing
  • Proven experience in security code review
  • Proven experience in application security testing (DAST, SAST, IAST, SCA) tools and processes
  • Strong foundation in computer and network security, authentication & authorization, security protocols and applied cryptography
  • Solid understanding with web security standards such as CSP, SOP, CORS, and emerging web security technologies.
  • Solid understanding on CI/CD pipelines, build systems and DevSecOps principles.
  • Experience defining security architecture patterns and standards in a large enterprise organization.
  • Experience with cloud-based security solutions and familiarity with cloud service providers, particularly in relation to application security
  • Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
  • Efficiency with web proxies such as Burp or OWASP ZAP or Fiddler
  • Understanding of OAuth and JWT implementations.
  • Ability to organize & communicate effectively, both written and verbal, with technical and non-technical people across functional teams
  • A BS degree in Computer Science, Cyber Security, other tech-related degree, or equivalent experience.
  • Experience in Cloud Security Posture Management (CSPM) and/or Application Security Posture Management (ASPM) tools is a plus.
  • Having OSWE OSCP, GWEB, GPEN or similar certificate is a plus
  • Experience in Mobile Application Penetration Testing is a plus
  • Familiarity with AI&ML & LLM concepts, AI Red Teaming, AI Guardrails is a plus.

#LI-Hybrid

Jobalert für diese Suche erstellen

Senior Application Security Engineer • Frankfurt, Hessen, Germany

Ähnliche Stellen

Senior Engineer SAP Defense & Security (all genders)

adesso business consulting AGfrankfurt, hesse, Deutschland

Senior Engineer SAP Defense & Security (all genders).SAP Defense Solutions gestalten: Die Entwicklung und Implementierung hochspezialisierter SAP‑Lösungen auf Basis von SAP Defense Forces & Public ... Mehr anzeigen

 • Gesponsert

Senior Application Manager / Solution Engineer - Transaction Reporting m/w/d

DZ BANK AGfrankfurt, hesse, Deutschland

Arbeiten Sie bei einer Bank, in der Sie Ihre weitere Zukunft und die Zukunft unserer Geschäftspartner erfolgreich gestalten können.Wir sind ein verlässlicher und leistungsfähiger Arbeitgeber, der I... Mehr anzeigen

 • Gesponsert

Mission Control System Applications Engineer

EUMETSATdarmstadt, hessen, Deutschland

Mission Control System Applications Engineer.EUMETSAT is Europe’s meteorological satellite agency, operating a fleet of satellites delivering weather and climate-related satellite data and images t... Mehr anzeigen

 • Gesponsert

Senior Architekt Cyber Security (m/w/d)

Finanz Informatik Technologie Serviceoffenbach am main, hessen, Deutschland

Partner für den IT-Betrieb der Finanz- und Versicherungsbranche.Banken, Versicherungen und Finanzdienstleistern als Kunden betreibt FI-TS.Als Senior Architekt Cyber Security (m/w/d) sind Sie.Konzep... Mehr anzeigen

 • Gesponsert

System Administrator / IT Security Engineer (m/w/d)

AKKODISFrankfurt am Main, Hessen, Germany

Starte als System Administrator / IT Security Engineer (m/w/d) in Frankfurt am Main.Du betreust moderne IT-Infrastrukturen, optimierst Linux-Systeme und setzt IT-Sicherheitsmaßnahmen um.Freue Dich ... Mehr anzeigen

Technical Application Specialist, Single-Use and Hardware (all genders)

Merck Life Sciencedarmstadt, hessen, Deutschland

Ready to explore, break barriers, and discover more? We know you’ve got big plans – so do we! Our colleagues across the globe love innovating with science and technology to enrich people’s lives wi... Mehr anzeigen

 • Gesponsert

Senior Cloud Engineer DevOps (Azure) (m/w/d)

GRAYOAKBad Nauheim, Germany

Abgeschlossenes Studium der (Wirtschafts-)Informatik oder vergleichbare Qualifikation.Mindestens 3-4 Jahre Berufserfahrung im Bereich Cloud Development, DevOps oder Platform Engineering.Fundierte E... Mehr anzeigen

 • Gesponsert

Senior Cloud Developer mit Architektur-Fokus (Go / AWS) (w/m/d)

Publicare Marketing Communications GmbHKronberg, Germany

Tiefes Tech-Fundament: Du verfgst ber mindestens 4 Jahre fundierte Berufserfahrung in der Softwareentwicklung, idealerweise im Cloud-Umfeld.Core-Skills: Du beherrschst Go (Golang) sicher und hast b... Mehr anzeigen

 • Gesponsert

Senior Security Engineer

Finanz Informatik Solutions Plus GmbHfrankfurt, hesse, Deutschland

Wir suchen dichalsSenior Security Engineer(m/w/d).Du gestaltest IT‑Security aktiv mit: Als Senior Security Engineer analysierst du Schwachstellen, koordinierst Security‑Incidents und setzt nachhalt... Mehr anzeigen

 • Gesponsert

Manager Application Modernization (all genders)

Deteconfrankfurt, hesse, Deutschland

We at Detecon International like to report on the diversity and impact of our projects.As management and technology consultants, we help shape the society of tomorrow in Germany and worldwide.With ... Mehr anzeigen

 • Gesponsert

System Administrator / IT Security Engineer (m/w/d)

AkkodisFrankfurt am Main, de

Starte als System Administrator / IT Security Engineer (m/w/d) in Frankfurt am Main.Du betreust moderne IT-Infrastrukturen, optimierst Linux-Systeme und setzt IT-Sicherheitsmaßnahmen um.Freue Dich ... Mehr anzeigen

 • Gesponsert

Senior Security Consultant w/m/d Elastic

Computacenterfrankfurt, hesse, Deutschland

Wir benötigen erfahrene Verstärkung für unser Elastic-SIEM-Team, um Projekte bei unseren Großkunden professionell umzusetzen.Du bist ein Technologe durch und durch, und Dir macht in Bezug auf den E... Mehr anzeigen

 • Gesponsert

Senior Security Engineer

Finanz Informatik Solutions Plus GmbH & Co. KGFrankfurt, de

Kostenlose Fahrrad- / Autostellplätze.Du gestaltest IT-Security aktiv mit: Als Senior Security Engineer analysierst du Schwachstellen, koordinierst Security-Incidents und setzt nachhaltige Schutzma... Mehr anzeigen

 • Gesponsert

IT Security Specialist (m/w/d) Service Owner Security Operation Center (SOC)

GOLDBECKhirschberg an der bergstraße, baden württemberg, Deutschland

GOLDBECK Hirschberg, Baden-Württemberg, Germany.Ganzheitliche Verantwortung für Betrieb, Weiterentwicklung, Qualität, Kosten und Controlling des internen SOC-Services für die gesamte GOLDBECK-Grupp... Mehr anzeigen

 • Gesponsert

Network Security Engineer

Zoomcarfrankfurt, hesse, Deutschland

Office based in our Sophia Antipolis (Valbonne, France) office 4 days per week or Kelsterbach (Frankfurt- Germany).Senior Network Security Engineer.We're seeking an experienced network security eng... Mehr anzeigen

 • Gesponsert

Senior Security Assurance Solutions Architect, AWS Security Assurance Services

Amazon Web Services (AWS)frankfurt, hesse, Deutschland

The Security Assurance Services (SAS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and exter... Mehr anzeigen

 • Gesponsert

Senior Expert – Sales Processes (m/f/d) – SAP

Fresenius Medical Care Deutschland GmbHBad Homburg bei Frankfurt, DE

At Fresenius Medical Care, we are the global leader in kidney care, committed to improving the lives of patients with chronic kidney disease.Our mission is to deliver high-quality, innovative produ... Mehr anzeigen

 • Gesponsert

Network Security Engineer

Fortinetfrankfurt, hesse, Deutschland

Office based in our Sophia Antipolis (Valbonne, France) office 4 days per week or Kelsterbach (Frankfurt Germany).Senior Network Security Engineer.We're seeking an experienced network security engi... Mehr anzeigen

 • Gesponsert

Cyber Defense Expert - Threat Detection & Response (f/m/d) Delos Cloud

SAPeschborn, hessen, Deutschland

Delos Cloud, a start-up founded by SAP, strives to deliver a sovereign cloud platform for the digital transformation of the German public sector.The platform is an essential component for the imple... Mehr anzeigen

 • Gesponsert

ERP-Spezialist (m/w/d)

HomeServe Gruppe DeutschlandBad Nauheim, Germany

Abgeschlossenes Studium im Bereich IT, Informatik oder eine vergleichbare Qualifikation.Jahre Erfahrung in der Implementierung und im Support von ERP-Systemen, idealerweise IFS Cloud.Erfahrung im P... Mehr anzeigen